]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
gh-116333: Relax error string text expectations in SSL-related tests (GH-116334)
authorWill Childs-Klein <willck93@gmail.com>
Thu, 21 Mar 2024 19:16:36 +0000 (14:16 -0500)
committerGitHub <noreply@github.com>
Thu, 21 Mar 2024 19:16:36 +0000 (19:16 +0000)
commitc85d84166a84a5cb2d724012726bad34229ad24e
treef12b215b319d1088b45794a58ad809bc111d7fe7
parent1f72fb5447ef3f8892b4a7a6213522579c618e8e
gh-116333: Relax error string text expectations in SSL-related tests (GH-116334)

* Relax error string text expectations in SSL-related tests

As suggested [here][1], this change relaxes the OpenSSL error string
text expectations in a number of tests. This was specifically done in
support of more easily building CPython [AWS-LC][2], but because AWS-LC
is a fork of [BoringSSL][3], it should increase compatibility with that
library as well.

In addition to the error string relaxations, we also add some guards
around the `tls-unique` channel binding being used with TLSv1.3, as that
feature (described in [RFC 6929][4]) is [not defined][5] for TLSv1.3.

[1]: https://discuss.python.org/t/support-building-ssl-and-hashlib-modules-against-aws-lc/44505/4
[2]: https://github.com/aws/aws-lc
[3]: https://github.com/google/boringssl
[4]: https://datatracker.ietf.org/doc/html/rfc5929#section-3
[5]: https://datatracker.ietf.org/doc/html/rfc8446#appendix-C.5
Lib/test/test_asyncio/test_events.py
Lib/test/test_imaplib.py
Lib/test/test_ssl.py
Misc/NEWS.d/next/Tests/2024-03-21-11-32-29.gh-issue-116333.F-9Ram.rst [new file with mode: 0644]