Can't upload Django with twine 1.6.0+

[timgraham]

$ twine upload -s Django-1.8.*
Uploading distributions to https://pypi.python.org/pypi
Uploading Django-1.8.5-py2.py3-none-any.whl
HTTPError: 500 Server Error: Internal Server Error

Downgrading to 1.5.0 allowed the upload to work.

[alex]

From PyPI's sentry:

AttributeError: 'list' object has no attribute 'startswith'
  File "src/webui.py", line 432, in run
    self.inner_run()
  File "src/webui.py", line 802, in inner_run
    getattr(self, action)()
  File "src/webui.py", line 2890, in file_upload
    if signature and not signature.startswith("-----BEGIN PGP SIGNATURE-----"):

[sigmavirus24]

Hey @timgraham thanks for reporting this. I just merged #138 to fix #137 which is a duplicate of this.

[sigmavirus24]

@timgraham can you test master before I release it on Monday?

[timgraham]

I've already uploaded the files with the old version -- is there an easy way to test?

[sigmavirus24]

You can use https://testpypi.python.org instead of pypi.python.org to test an upload.

[timgraham]

$ twine upload -s Django-1.8.4.tar.gz
Uploading distributions to https://testpypi.python.org
Signing Django-1.8.4.tar.gz

You need a passphrase to unlock the secret key for
user: "Tim Graham <[email protected]>"
4096-bit RSA key, ID 73EDE252, created 2014-11-15

File `Django-1.8.4.tar.gz.asc' exists. Overwrite? (y/N) y
Uploading Django-1.8.4.tar.gz
RedirectDetected: "https://testpypi.python.org" attempted to redirect to "https://testpypi.python.org/pypi" during upload. Aborting...

[timgraham]

Maybe it's supposed to be: repository:https://testpypi.python.org/pypi? In that case, "HTTPError: 401 Client Error: You must be identified to edit package information"

[sigmavirus24]

Ah yeah it should be /pypi (I'm on my phone). You need credentials on testpypi too (I forget that frequently too) and to have Django registered such that you can upload to it. Sorry about that.

[sigmavirus24]

I was able to test master over the weekend and verified I could upload twine 1.6.2 to Test PyPI with a signature using master. That has been released as 1.6.3 as of this morning. Thanks again for the report @timgraham