]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
[3.6] bpo-35925: Skip SSL tests that fail due to weak external certs or old TLS ...
authorGregory P. Smith <greg@krypto.org>
Wed, 29 May 2019 02:08:28 +0000 (19:08 -0700)
committerNed Deily <nad@python.org>
Wed, 29 May 2019 02:08:27 +0000 (22:08 -0400)
commit8ab624b17ba656e9af5a79be6af0cf2911a111ba
treeada82040df8171666b8cb9341dad1994e834dbd3
parent3dbc43f63c7e056b80d6e28f3812125a09555456
[3.6] bpo-35925: Skip SSL tests that fail due to weak external certs or old TLS (GH-13124) (GH-13252)

* [3.6] bpo-35925: Skip SSL tests that fail due to weak external certs. (GH-13124)

Modern Linux distros such as Debian Buster have default OpenSSL system
configurations that reject connections to servers with weak certificates
by default.  This causes our test suite run with external networking
resources enabled to skip these tests when they encounter such a failure.

Fixing the network servers is a separate issue..
(cherry picked from commit 2cc0223f43a1ffd59c887a73e2b0ce5202f3be90)

Co-authored-by: Gregory P. Smith <greg@krypto.org>
* Also skip ssl tests that fail when the system rejects TLSv1.

* Remove the test_httplib change; server was updated.

self-signed.pythontest.net was updated so the test_httplib change is
no longer necessary.
Lib/test/test_nntplib.py
Lib/test/test_ssl.py
Misc/NEWS.d/next/Tests/2019-05-06-18-29-54.bpo-35925.gwQPuC.rst [new file with mode: 0644]