[Python-checkins] bpo-38815: Accept TLSv3 default in min max test (GH-NNNN) (GH-17437)

Miss Islington (bot) webhook-mailer at python.org
Mon Dec 2 11:15:47 EST 2019


https://github.com/python/cpython/commit/34864d1cffdbfc620f8517dab9a68ae9a37b8c53
commit: 34864d1cffdbfc620f8517dab9a68ae9a37b8c53
branch: master
author: torsava <torsava at redhat.com>
committer: Miss Islington (bot) <31488909+miss-islington at users.noreply.github.com>
date: 2019-12-02T08:15:42-08:00
summary:

bpo-38815: Accept TLSv3 default in min max test (GH-NNNN) (GH-17437)



Make ssl tests less strict and also accept TLSv3 as the default maximum
version. This change unbreaks test_min_max_version on Fedora 32.


https://bugs.python.org/issue38815

files:
M Lib/test/test_ssl.py

diff --git a/Lib/test/test_ssl.py b/Lib/test/test_ssl.py
index 3cd6e927a469e..258816d912b36 100644
--- a/Lib/test/test_ssl.py
+++ b/Lib/test/test_ssl.py
@@ -1203,12 +1203,18 @@ def test_min_max_version(self):
             # RHEL 8 uses TLS 1.2 by default
             ssl.TLSVersion.TLSv1_2
         }
+        maximum_range = {
+            # stock OpenSSL
+            ssl.TLSVersion.MAXIMUM_SUPPORTED,
+            # Fedora 32 uses TLS 1.3 by default
+            ssl.TLSVersion.TLSv1_3
+        }
 
         self.assertIn(
             ctx.minimum_version, minimum_range
         )
-        self.assertEqual(
-            ctx.maximum_version, ssl.TLSVersion.MAXIMUM_SUPPORTED
+        self.assertIn(
+            ctx.maximum_version, maximum_range
         )
 
         ctx.minimum_version = ssl.TLSVersion.TLSv1_1



More information about the Python-checkins mailing list