Closed
Description
Issue description
Pipenv call pip with a sha1 hash, but pip does not support sha1 anymore.
We are using a private repository on packagecloud.io, and this repository provides the following hashes: MD5, SHA1, SHA256, SHA512. It seems that pipenv try to use the SHA1 hash, but it should select the SHA256 or SHA512 ones.
I can confirm tha in the Pipfile.lock the stored hashes for the two problematics packages are using sha1.
An error occurred while installing ma-apiclients==8.10.3 --hash=sha1:8e4277fbba32eba69defbb36018812b02f1154cf! Will try again.
…
[pipenv.exceptions.InstallError]: pip: error: Allowed hash algorithms for --hash are sha256, sha384, sha512.
Expected result
It use another hash than the sha1 one.
Actual result
> > pipenv install
Installing dependencies from Pipfile.lock (ead1b2)...
🐍 ▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉ 2/2 — 00:00:00
An error occurred while installing ma-apiclients==8.10.3 --hash=sha1:8e4277fbba32eba69defbb36018812b02f1154cf! Will try again.
An error occurred while installing ma-flask-common[ab_dispatcher,analytics,cache,celery,errors,external_celery,logger,minifier,profiler,protection,signer,sms,thresholds]==13.1.2 --hash=sha1:906f756989577ba7406a4f007055692758f438d6! Will try again.
Installing initially failed dependencies...
[InstallError]: File "/home/amorignot/opt/pyenv/versions/3.6.5/lib/python3.6/site-packages/pipenv/cli/command.py", line 252, in install
[InstallError]: site_packages=state.site_packages
[InstallError]: File "/home/amorignot/opt/pyenv/versions/3.6.5/lib/python3.6/site-packages/pipenv/core.py", line 2062, in do_install
[InstallError]: keep_outdated=keep_outdated
[InstallError]: File "/home/amorignot/opt/pyenv/versions/3.6.5/lib/python3.6/site-packages/pipenv/core.py", line 1312, in do_init
[InstallError]: pypi_mirror=pypi_mirror,
[InstallError]: File "/home/amorignot/opt/pyenv/versions/3.6.5/lib/python3.6/site-packages/pipenv/core.py", line 900, in do_install_dependencies
[InstallError]: retry_list, procs, failed_deps_queue, requirements_dir, **install_kwargs
[InstallError]: File "/home/amorignot/opt/pyenv/versions/3.6.5/lib/python3.6/site-packages/pipenv/core.py", line 796, in batch_install
[InstallError]: _cleanup_procs(procs, failed_deps_queue, retry=retry)
[InstallError]: File "/home/amorignot/opt/pyenv/versions/3.6.5/lib/python3.6/site-packages/pipenv/core.py", line 703, in _cleanup_procs
[InstallError]: raise exceptions.InstallError(c.dep.name, extra=err_lines)
[pipenv.exceptions.InstallError]: Usage: pip [options]
[pipenv.exceptions.InstallError]:
[pipenv.exceptions.InstallError]: ERROR: Invalid requirement: ma-apiclients==8.10.3 --hash=sha1:8e4277fbba32eba69defbb36018812b02f1154cf
[pipenv.exceptions.InstallError]: pip: error: Allowed hash algorithms for --hash are sha256, sha384, sha512.
ERROR: Couldn't install package: ma-apiclients
Package installation failed...
☤ ▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉▉ 1/2 — 00:00:02
Steps to replicate
I am not sure
$ pipenv --support
Pipenv version: '2020.11.4'
Pipenv location: '/home/amorignot/opt/pyenv/versions/3.6.5/lib/python3.6/site-packages/pipenv'
Python location: '/home/amorignot/opt/pyenv/versions/3.6.5/bin/python'
Python installations found:
3.8.1:/home/amorignot/opt/pyenv/versions/3.8.1/bin/python33.7.5:/home/amorignot/opt/pyenv/versions/3.7.5/bin/python3.7m3.6.10:/home/amorignot/opt/pyenv/versions/3.6.10/bin/python33.6.5:/home/amorignot/opt/pyenv/versions/3.6.5/bin/python33.6.5:/home/amorignot/opt/pyenv/versions/3.6.5/bin/python3.63.6.5:/home/amorignot/opt/pyenv/versions/3.6.5/bin/python3.6m3.6.5:/home/amorignot/opt/pyenv/versions/3.6.5/bin/python33.5.3:/home/amorignot/opt/pyenv/versions/3.5.3/bin/python3.53.5.3:/usr/bin/python3.53.5.3:/usr/bin/python33.5.3:/usr/bin/python3.5m3.4.2:/home/amorignot/opt/pyenv/versions/3.4.2/bin/python3.4m2.7.17:/home/amorignot/opt/pyenv/versions/2.7.17/bin/python22.7.13:/usr/bin/python22.7.13:/usr/bin/python2.72.7.9:/home/amorignot/opt/pyenv/versions/2.7.9/bin/python2
PEP 508 Information:
{'implementation_name': 'cpython',
'implementation_version': '3.6.5',
'os_name': 'posix',
'platform_machine': 'x86_64',
'platform_python_implementation': 'CPython',
'platform_release': '4.9.0-14-amd64',
'platform_system': 'Linux',
'platform_version': '#1 SMP Debian 4.9.240-2 (2020-10-30)',
'python_full_version': '3.6.5',
'python_version': '3.6',
'sys_platform': 'linux'}
Pipenv–specific environment variables:
PIPENV_VENV_IN_PROJECT:1
</details>