Open Stack

On 2014-03-26 08:17:14 +0100 (+0100), Christian Schwede wrote:
> looks like your pip version is to old
[...]

Yes, it's worth pointing out that pip versions prior to 1.4 did not
validate (or in some cases even attempt to use) HTTPS during package
download, making it significantly less secure. It also had
undesirable behaviors like installing pre-release versions by
default and spidering external Web sites to find packages not hosted
directly on PyPI.

However, the error being encountered there should be solved when
https://launchpad.net/bugs/1296310 is fixed and a new version of pbr
released with the corresponding patch included.
-- 
Jeremy Stanley