Merge pull request #9191 from Carreau/insecure

Update release script not to upload insecurly

tools/release

@@ -54,18 +54,18 b" if 'upload' not in sys.argv:"
     print("`./release upload` to register and release")
     sys.exit(0)
 
-# Register with the Python Package Index (PyPI)
-print( 'Registering with PyPI...')
+# Not Registering with PyPI, registering with setup.py is insecure as communication is not encrypted
 cd(ipdir)
-sh('./setup.py register')
 
 # Upload all files
-sh(sdists + ' upload')
+sh(sdists)
 for py in ('2.7', '3.4'):
-    sh('python%s setupegg.py bdist_wheel upload' % py)
+    sh('python%s setupegg.py bdist_wheel' % py)
+
+print('Will not upload with setuptools as upload connection is insecure. Please use `twine upload dist/*` to upload the files to PyPI')
 
 cd(distdir)
-print( 'Uploading distribution files...')
+print( 'Uploading distribution files to GitHub...')
 
 for fname in os.listdir('.'):
     # TODO: update to GitHub releases API
@@ -75,6 +75,7 b" for fname in os.listdir('.'):"
     post_download("ipython/ipython", fname, description=desc)
 
 # Make target dir if it doesn't exist
+print('Uploading IPython to backup site.')
 sh('ssh %s "mkdir -p %s/release/%s" ' % (archive_user, archive_dir, version))
 sh('scp * %s' % release_site)
 

tools/toollib.py

@@ -4,7 +4,6 b' from __future__ import print_function'
 
 # Library imports
 import os
-import sys
 
 # Useful shorthands
 pjoin = os.path.join