Hello,
I'm planning to release a bugfix version of psycopg in a few days.
There is a regression compared to previous versions so that connection
fails if some arguments are passed as None instead of omitted, which
was not documented (nor tested) but quite idiomatic, see
https://github.com/psycopg/psycopg2/issues/517 and from the amount of
references to the bug it seems is biting several people.
Another problem that hasn't probably bitten many, but I'm glad if we
have a solution, is that the wheel version of psycopg ships with
libssl 0.9.8e, which misses some features (hence
https://github.com/psycopg/psycopg2/issues/518). 0.9.8e is the most
up-to-date libssl that is possible to install on the venerable
(venerable means obsolete) CentOS 5, the platform used to build
manylinux1-compliant wheel packages. CentOS 5 is going EoL in a matter
of weeks, so I'm expecting the "Python Packaging Authority" (!) group
to release soon specs for wheel packages to be build on a less ageing
(ageing means decrepit) platform (see
https://github.com/pypa/manylinux/issues/96 if you fancy).
So there is this window of time, between when CentOS 5 will be
abandoned and when the Python community will be able to release
manylinux2 packages, in which if an ssl security bug is found we don't
have many ways to protect except blaming others, a fine activity sure,
but of which I prefer not being a champion. The solution of the
problem seems to build our own version of libssl from source, as well
as the libraries depending on it, which are libpq and libldap. The
build script is at
https://github.com/psycopg/psycopg2-wheels/blob/openssl1/scripts/build_libpq.sh
and you can find the artefacts produced at
http://initd.org/psycopg/upload/psycopg2-2.7.1.dev1/ They seem working
ok (as the problem reported in #518 seems fixed) but I wouldn't mind
if someone could take a look at the build procedure and try out the
packages, especially if they use ldap for authentication as it's
something I haven't tested at all (it compiles: ship it!). Just in
case I've missed a -fPIC or something.
Any feedback is appreciated. Have a good day!
-- Daniele