The rolling brownouts are finished, and TLSv1.0 and TLSv1.1 have been disabled.
Posted Apr 11, 2018 - 15:37 UTC
Update
The rolling brownouts have been upgraded to a blackout, TLSv1.0 and TLSv1.1 will be rejected with a HTTP 403 at all times.
Posted Apr 08, 2018 - 15:49 UTC
Update
We have increased the rolling brownouts to the first 20 minutes of every hour, plus the first 20 minutes after each half-hour (:00-:20 and :30-:50).
Posted Apr 06, 2018 - 11:43 UTC
Update
We have increased the rolling brownouts to the first 15 minutes of every hour, plus the first 15 minutes after each half-hour (:00-:15 and :30-:45).
Posted Apr 03, 2018 - 11:45 UTC
Update
We have increased the rolling brownouts to the first 15 minutes of every hour, plus the first 10 minutes after each half-hour (:00-:15 and :30-:40).
Posted Mar 31, 2018 - 16:00 UTC
Update
We have increased the rolling brownouts to the first 15 minutes of every hour, plus the first 5 minutes after each half-hour (:00-:15 and :30-:35).
Posted Mar 28, 2018 - 16:33 UTC
Update
We are currently enforcing TLSv1.2 during the first 15 minutes of each hour. You can follow the planning and discussion of this maintenance at https://github.com/pypa/warehouse/issues/3411
Posted Mar 27, 2018 - 16:46 UTC
In progress
Scheduled maintenance is currently in progress. We will provide updates as necessary.
Posted Mar 22, 2018 - 18:59 UTC
Scheduled
In preparation for our CDN provider deprecating TLSv1.0 and TLSv1.1 protocols, we have begun rolling brownouts for these protocols for the first ten (10) minutes of each hour.
During that window, clients accessing pypi.python.org with clients that do not support TLSv1.2 will receive an HTTP 403 with the error message "This is a brown out of TLSv1 support. TLSv1 support is going away soon, upgrade to a TLSv1.2+ capable client.".
For users of pip on MacOS/OS X, upgrading to the latest pip should resolve the issue. pip users on other platforms should upgrade their OpenSSL to a version which supports TLSv1.2.