From c3d9c5ca0a74f0eedc228640977d6be1c2ddc176 Mon Sep 17 00:00:00 2001 From: Benjamin Peterson Date: Wed, 4 Mar 2015 23:18:48 -0500 Subject: adjust test_crl_check for trusted first being default --- Lib/test/test_ssl.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/Lib/test/test_ssl.py b/Lib/test/test_ssl.py index 6353e23..779b622 100644 --- a/Lib/test/test_ssl.py +++ b/Lib/test/test_ssl.py @@ -2007,7 +2007,8 @@ else: context = ssl.SSLContext(ssl.PROTOCOL_TLSv1) context.verify_mode = ssl.CERT_REQUIRED context.load_verify_locations(SIGNING_CA) - self.assertEqual(context.verify_flags, ssl.VERIFY_DEFAULT) + tf = getattr(ssl, "VERIFY_X509_TRUSTED_FIRST", 0) + self.assertEqual(context.verify_flags, ssl.VERIFY_DEFAULT | tf) # VERIFY_DEFAULT should pass server = ThreadedEchoServer(context=server_context, chatty=True) -- cgit v0.12