Sublime Forum

Beta Testing Package Control

#1

I have a new version of Package Control I am hoping to push out soon that resolves potential MITM attacks that can affect users with automatic updates turned on. There are a number of little fixes for various bugs, but the big thing is that the main channel now runs over HTTPS and the plugin actually authenticates SSL certificates.

Since a bug in running automatic updates will prevent me from updating Package Control to fix itself, I need to be fairly sure there are no such bugs in the next version, or there could be many thousands of sad developers. :smile:

If you can, please take a few minutes and help out with testing. If you run the “Add Repository” command from the command palette, you can add the following repository: sublime.wbond.net/testing/packages.json

To test, please:

  • Run the Upgrade Package command from the command palette to get the latest version of Package Control

  • Trying installing and removing a few packages, ideally at least one from GitHub and one from BitBucket - see wbond.net/sublime_packages/community to find packages on the different hosting sites

  • Try removing a package

  • Check your console (ctrl+`) for errors and paste any backtraces you see

Thanks!

0 Likes

#2

I added the repository and didn’t think too much about it. Just restarted ST2 while trying to figure something else out, and I noticed this in the console:

Package Control: Installing 2 upgrades Exception in thread Thread-5: Traceback (most recent call last): File "/System/Library/Frameworks/Python.framework/Versions/2.6/lib/python2.6/threading.py", line 532, in __bootstrap_inner self.run() File "./Package Control.py", line 2250, in run File "./Package Control.py", line 2333, in upgrade_packages File "./Package Control.py", line 1316, in install_package NameError: global name 'settings' is not defined

EDIT: I just restarted ST2 again after making a change in a keymap file and didn’t get the same thing in the console, so it very well may have been related to my configuration.

0 Likes

#3

[quote=“phillip.koebbe”]I added the repository and didn’t think too much about it. Just restarted ST2 while trying to figure something else out, and I noticed this in the console:

Package Control: Installing 2 upgrades Exception in thread Thread-5: Traceback (most recent call last): File "/System/Library/Frameworks/Python.framework/Versions/2.6/lib/python2.6/threading.py", line 532, in __bootstrap_inner self.run() File "./Package Control.py", line 2250, in run File "./Package Control.py", line 2333, in upgrade_packages File "./Package Control.py", line 1316, in install_package NameError: global name 'settings' is not defined

EDIT: I just restarted ST2 again after making a change in a keymap file and didn’t get the same thing in the console, so it very well may have been related to my configuration.[/quote]

Perfect, thanks for the bug report!

0 Likes

#4

Updated and did all the steps; no problems so far on Linux 64-bit.

0 Likes

#5

After the package control plugin reloaded from updating packages.json I got this error:

Exception in thread Thread-1921: Traceback (most recent call last): File ".\threading.py", line 532, in __bootstrap_inner File ".\Package Control.py", line 2357, in run File ".\shutil.py", line 216, in rmtree File ".\shutil.py", line 216, in rmtree File ".\shutil.py", line 221, in rmtree File ".\shutil.py", line 219, in rmtree WindowsError: [Error 5] Access is denied: u'C:\\Users\\James.Brooks\\AppData\\Roaming\\Sublime Text 2\\Packages\\SublimeCodeIntel\\libs\\_win64\\ciElementTree.pyd'

Windows 7 64Bit.

0 Likes

#6

Windows XP
Adding repository went fine but when trying to upgrade package got this:

Exception in thread Thread-3: Traceback (most recent call last): File ".\threading.py", line 532, in __bootstrap_inner File ".\Package Control.py", line 1732, in run File ".\Package Control.py", line 1574, in make_package_list File ".\Package Control.py", line 955, in list_available_packages File ".\Package Control.py", line 910, in list_repositories File ".\Package Control.py", line 99, in get_repositories KeyError: 'repositories'
Whole process including removing and adding packages in OS X went fine.

0 Likes

#7

Compared the user/Package Control.sublime-settings in OS X to Windows and saw windows had a repository channels section with entries that did not exist in OS X. I removed that section and then everything works fine.

0 Likes

#8

Windows XP behind a corporate firewall with custom SSL certificate handling.

I cannot upgrade packages or Install packages. When I attempt either, I get a dialog box with

“Package Control: There are no packages available for installation.”

or

“Package Control: There are no packages ready for upgrade.”

Any way to go back to HTTP? The company I work for will not change its network policies.

Here’s an excerpt from the console log:

Package Control: Error downloading channel. URL error _ssl.c:480: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed downloading https://sublime.wbond.net/repositories.json. error: Package Control: There are no packages available for installation. Package Control: Error downloading channel. URL error _ssl.c:480: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed downloading https://sublime.wbond.net/repositories.json. error: Package Control: There are no packages available for installation. Package Control: Error downloading channel. URL error _ssl.c:480: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed downloading https://sublime.wbond.net/repositories.json. error: Package Control: There are no packages available for installation. Package Control: Error downloading channel. URL error _ssl.c:480: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed downloading https://sublime.wbond.net/repositories.json. error: Package Control: There are no packages ready for upgrade. Package Control: Error downloading channel. URL error _ssl.c:480: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed downloading https://sublime.wbond.net/repositories.json. error: Package Control: There are no packages ready for upgrade.

0 Likes

#9

I believe the issue is with the server and the old version of OpenSSL running on it.

You certainly can set the “repository_channels” setting (wbond.net/sublime_packages/packa … l/settings) to use the non-https channel, you are just opening yourself up to potential man-in-the-middle attacks.

Hopefully I should have a new server up an running in the next day or two.

0 Likes

#10

Thank you. Would you consider posting here once you move to the new server so I can test?

0 Likes

#11

I’m still getting the"Package Control: There are no packages available for installation." error when using the https channel, so I’m assuming this is still an open issue. Using the non-https channel worked as described, though. Any idea when this will be resolved?

0 Likes

#12

Yeah, there is still an issue with https proxies and authentication. I’m changing jobs next Monday, so things have been kinda insane for me. Hopefully I will have time to do some testing and release a new version of Package Control in a week or two.

0 Likes

#13

Turning the repository to “http” allows me to list available packages again, but install does not work.
Can you please post here when the certificate works again
( I cannot explain why this works for other people with the same version )

0 Likes

#14

If you are behind a proxy, this patch will solve the problem: github.com/wbond/sublime_packag … l/pull/116

0 Likes