opened
mateor
username_0
requests[security] has a dependency on pyopenssl, which is currently
triggering a depreaction due to an OpenSSL.rand call.

pyopenssl has fixed this issue in code, but is waiting for a maintainer
to return from vacation and cut a release.

In the meantime, the release cannot be completed with the current
dep due to the non-zero it raises.

      .7/site-packages/urllib3/contrib/pyopenssl.py:46: DeprecationWarning: OpenSSL.rand is deprecated - you should use os.urandom instead
  import OpenSSL.SSL
      **** Failed to install cryptography-2.0.3 (caused by: NonZeroExit("received exit code 1 during execution of

This was a CI-fix around ssl handshakes, and since the CI is currently having its own
issues, I figured we could unlock the release while we wait.

If this commit lands, it should be short-term and be undone once the
pyopenssl can be released.

References: #4856

### Problem

(_explain the context of the problem and why you're making this change. include
references to all relevant github issues._)

### Solution

(_describe the modifications you've made._)

### Result

(_describe how your changes affect the end-user behavior of the system. this section is
optional, and should generally be summarized in the title of the pull request._)
Downgrade to vanilla requests.
issue
created
mateor
username_0
Lets see what the CI says, and if promising, I will pull in reviewers.
comment
created
mateor
username_0
Hmmm. This is failing an interpreter selection test for pex integration. No mention of it in the issues that I saw, but seems unrelated to the change in this patch: https://travis-ci.org/pantsbuild/pants/jobs/273705291#L1128
comment
created
mateor
username_0
Okay, according to [here](https://travis-ci.org/pantsbuild/pants/jobs/273473403), this CI failure is indeed a preexisting issue. So I will not feel compelled to block the release.

Merging this and will put out the release after work on Tuesday
comment