title: In python PIP, how can I make files in my private pip index "secure and verifiable"?
body: <p>I was a happy man, having his own happy local pip index. One day I've updated pip client and I'm not happy anymore:</p>
  
  <pre><code>Downloading/unpacking super_package
  Getting page https://my_server/index/super_package/
  URLs to search for versions for super_package:
  * https://my_server/index/super_package/
  * https://pypi.python.org/simple/super_package/
  Analyzing links from page https://my_server/index/super_package/
  Skipping https://my_server/ci/super_package-0.2.2.tar.gz (from https://my_server/index/super_package/) because it is an insecure and unverifiable file.
  </code></pre>
  
  <p>But WHY?
  I have SSL enabled on my server and my <code>pip.conf</code> file looks like this:</p>
  
  <pre><code>[global]
  cert = /path/to/my_server/cert.pem
  index-url = https://my_server/index
  extra-index-url = https://pypi.python.org/simple/
  </code></pre>
  
  <p>How is 'secure and verifiable'/'insecure and unverifiable' file defined? How PIP distinguishes between them?</p>
  
  <p>Finally: <strong>Do you want me to switch to easy_install?</strong> </p>
  
  <p><strong>EDIT:</strong> </p>
  
  <p>My own PIP index looks like this:</p>
  
  <pre><code>&lt;html&gt;
  &lt;head&gt;
  &lt;title&gt;Package Index&lt;/title&gt;
  &lt;meta name="api-version" value="2" /&gt;
  &lt;/head&gt;
  &lt;body&gt;&lt;a href="ADMESARfari/index.html"&gt;ADMESARfari&lt;/a&gt;&lt;br/&gt;
  &lt;a href="chembl-internal-ws/index.html"&gt;chembl-internal-ws&lt;/a&gt;&lt;br/&gt;
  &lt;a href="chembl_api/index.html"&gt;chembl_api&lt;/a&gt;&lt;br/&gt;
      ...
  &lt;a href="gdb/index.html"&gt;gdb&lt;/a&gt;&lt;br/&gt;
  &lt;/body&gt;
  &lt;/html&gt;
  </code></pre>
  
  <p>CA cert of the PIP server is installed on my mac but I'm still having the same problem...</p>
  
  <p><img src="https://i.stack.imgur.com/uNNbY.png" alt="enter image description here"></p>