summaryrefslogtreecommitdiffstats
path: root/Lib/test
diff options
context:
space:
mode:
authorChristian Heimes <christian@cheimes.de>2013-08-25 12:12:41 (GMT)
committerChristian Heimes <christian@cheimes.de>2013-08-25 12:12:41 (GMT)
commit8f65ef8853c06783b420c01a54dbba0d330836fb (patch)
tree337dd5dcabdefe4ae92514d4e6946c990f474dd5 /Lib/test
parent82f88283171933127f20f866a7f98694b29cca56 (diff)
downloadcpython-8f65ef8853c06783b420c01a54dbba0d330836fb.zip
cpython-8f65ef8853c06783b420c01a54dbba0d330836fb.tar.gz
cpython-8f65ef8853c06783b420c01a54dbba0d330836fb.tar.bz2
Issue #18709: Fix issue with IPv6 address in subjectAltName on Mac OS X Tiger
Diffstat (limited to 'Lib/test')
-rw-r--r--Lib/test/test_ssl.py22
1 files changed, 15 insertions, 7 deletions
diff --git a/Lib/test/test_ssl.py b/Lib/test/test_ssl.py
index 3b868f0..f779dba 100644
--- a/Lib/test/test_ssl.py
+++ b/Lib/test/test_ssl.py
@@ -102,13 +102,21 @@ class BasicTests(unittest.TestCase):
(('emailAddress', 'python-dev@python.org'),))
self.assertEqual(p['subject'], subject)
self.assertEqual(p['issuer'], subject)
- self.assertEqual(p['subjectAltName'],
- (('DNS', 'altnull.python.org\x00example.com'),
- ('email', 'null@python.org\x00user@example.org'),
- ('URI', 'http://null.python.org\x00http://example.org'),
- ('IP Address', '192.0.2.1'),
- ('IP Address', '2001:DB8:0:0:0:0:0:1\n'))
- )
+ if ssl._OPENSSL_API_VERSION >= (0, 9, 8):
+ san = (('DNS', 'altnull.python.org\x00example.com'),
+ ('email', 'null@python.org\x00user@example.org'),
+ ('URI', 'http://null.python.org\x00http://example.org'),
+ ('IP Address', '192.0.2.1'),
+ ('IP Address', '2001:DB8:0:0:0:0:0:1\n'))
+ else:
+ # OpenSSL 0.9.7 doesn't support IPv6 addresses in subjectAltName
+ san = (('DNS', 'altnull.python.org\x00example.com'),
+ ('email', 'null@python.org\x00user@example.org'),
+ ('URI', 'http://null.python.org\x00http://example.org'),
+ ('IP Address', '192.0.2.1'),
+ ('IP Address', '<invalid>'))
+
+ self.assertEqual(p['subjectAltName'], san)
def test_DER_to_PEM(self):
with open(SVN_PYTHON_ORG_ROOT_CERT, 'r') as f: