]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
[3.12] gh-116333: Relax error string text expectations in SSL-related tests (GH-11633...
authorMiss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Thu, 21 Mar 2024 20:46:20 +0000 (21:46 +0100)
committerGitHub <noreply@github.com>
Thu, 21 Mar 2024 20:46:20 +0000 (20:46 +0000)
commit05c5bece78391f0c17f82c435b157a8c2dc2396d
tree08d5c35f047a80274cb4ced2bbc4d6d29911d59b
parentea290f8f19db151456f9d52c4c77dd1c30299945
[3.12] gh-116333: Relax error string text expectations in SSL-related tests (GH-116334) (GH-117136)

gh-116333: Relax error string text expectations in SSL-related tests (GH-116334)

* Relax error string text expectations in SSL-related tests

As suggested [here][1], this change relaxes the OpenSSL error string
text expectations in a number of tests. This was specifically done in
support of more easily building CPython [AWS-LC][2], but because AWS-LC
is a fork of [BoringSSL][3], it should increase compatibility with that
library as well.

In addition to the error string relaxations, we also add some guards
around the `tls-unique` channel binding being used with TLSv1.3, as that
feature (described in [RFC 6929][4]) is [not defined][5] for TLSv1.3.

[1]: https://discuss.python.org/t/support-building-ssl-and-hashlib-modules-against-aws-lc/44505/4
[2]: https://github.com/aws/aws-lc
[3]: https://github.com/google/boringssl
[4]: https://datatracker.ietf.org/doc/html/rfc5929GH-section-3
[5]: https://datatracker.ietf.org/doc/html/rfc8446GH-appendix-C.5
(cherry picked from commit c85d84166a84a5cb2d724012726bad34229ad24e)

Co-authored-by: Will Childs-Klein <willck93@gmail.com>
Lib/test/test_asyncio/test_events.py
Lib/test/test_imaplib.py
Lib/test/test_ssl.py
Misc/NEWS.d/next/Tests/2024-03-21-11-32-29.gh-issue-116333.F-9Ram.rst [new file with mode: 0644]