[New-bugs-announce] [issue36855] update tests relying on a copy of a TLS certificate (pem) to support two versions

[Gregory P. Smith]

New submission from Gregory P. Smith <greg at krypto.org>:

We're having pain today due to the Lib/test/selfsigned_pythontestdotnet.pem certificate update sychronization.

This wouldn't be painful if our tests relying on a specific certificate matching something elsewhere on the network supported multiple possible certificates.  Specifically an old and a new cert.  When doing that, we could go ahead and commit the new cert, moving the existing one to old, before flipping the update on the test infrastructure.  in all branches.

that'd prevent massive PR CI and buildbot failure fallout.

----------
components: Tests
messages: 341912
nosy: gregory.p.smith
priority: normal
severity: normal
stage: needs patch
status: open
title: update tests relying on a copy of a TLS certificate (pem) to support two versions
type: enhancement
versions: Python 3.7, Python 3.8

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue36855>
_______________________________________