]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
gh-136306: fix `test_ssl.ContextTests.test_set_groups` on FIPS builds (#137405)
authorBénédikt Tran <10796600+picnixz@users.noreply.github.com>
Tue, 5 Aug 2025 07:50:34 +0000 (09:50 +0200)
committerGitHub <noreply@github.com>
Tue, 5 Aug 2025 07:50:34 +0000 (07:50 +0000)
commit0af7556b94eac47041957f36e98e230650b56bbf
tree80bc00c6a160f6a017a227f68e1fb4dd7907cec0
parent001461a29235216eb9c8295c66c323fdd34a7d59
gh-136306: fix `test_ssl.ContextTests.test_set_groups` on FIPS builds (#137405)

X25519 is not a valid curve if OpenSSL is built with FIPS mode,
and ignoring unknown groups in `SSL_CTX_set1_groups_list()`
is only supported since OpenSSL 3.3, so we use two curves that
are known to be FIPS-compliant, namely P-256 and P-384.
Lib/test/test_ssl.py