From: Colin Pinnell McAllister Date: Fri, 13 Feb 2026 23:01:27 +0000 (-0600) Subject: python3: Backport TLS test fix X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=fd3b1efb6f7ffb5505ff7eb95cae222e1db9f776;p=thirdparty%2Fopenembedded%2Fopenembedded-core-contrib.git python3: Backport TLS test fix Backports fix for Python3 that allows TLS 1.2 to be the minimum version. Signed-off-by: Colin Pinnell McAllister Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Ross Burton Signed-off-by: Richard Purdie --- diff --git a/meta/recipes-devtools/python/python3/0001-gh-144787-tests-Allow-TLS-v1.2-to-be-minimum-version.patch b/meta/recipes-devtools/python/python3/0001-gh-144787-tests-Allow-TLS-v1.2-to-be-minimum-version.patch new file mode 100644 index 0000000000..3b0e98bf51 --- /dev/null +++ b/meta/recipes-devtools/python/python3/0001-gh-144787-tests-Allow-TLS-v1.2-to-be-minimum-version.patch @@ -0,0 +1,39 @@ +From bcd6e2535cb0dbf72b677eb6bddb644cb035ed51 Mon Sep 17 00:00:00 2001 +From: Colin McAllister +Date: Fri, 13 Feb 2026 11:17:53 -0600 +Subject: [PATCH 1/1] gh-144787: [tests] Allow TLS v1.2 to be minimum version + (GH-144790) + +Allow TLS v1.2 to be minimum version + +Updates test_min_max_version to allow TLS v1.2 to be minimum version if +TLS 1.0 and 1.1 are disabled in OpenSSL. + +Upstream-Status: Backport [https://github.com/python/cpython/commit/f24009feeb78f605a3ee177d9e7cfb63d5890ee1] + +Signed-off-by: Colin Pinnell McAllister +--- + Lib/test/test_ssl.py | 7 ++++++- + 1 file changed, 6 insertions(+), 1 deletion(-) + +diff --git a/Lib/test/test_ssl.py b/Lib/test/test_ssl.py +index 6023c89bca..7e9ba735b3 100644 +--- a/Lib/test/test_ssl.py ++++ b/Lib/test/test_ssl.py +@@ -1156,7 +1156,12 @@ def test_min_max_version(self): + ctx.maximum_version = ssl.TLSVersion.MINIMUM_SUPPORTED + self.assertIn( + ctx.maximum_version, +- {ssl.TLSVersion.TLSv1, ssl.TLSVersion.TLSv1_1, ssl.TLSVersion.SSLv3} ++ { ++ ssl.TLSVersion.TLSv1, ++ ssl.TLSVersion.TLSv1_1, ++ ssl.TLSVersion.TLSv1_2, ++ ssl.TLSVersion.SSLv3, ++ } + ) + + ctx.minimum_version = ssl.TLSVersion.MAXIMUM_SUPPORTED +-- +2.49.1 + diff --git a/meta/recipes-devtools/python/python3_3.14.2.bb b/meta/recipes-devtools/python/python3_3.14.2.bb index 7481e70e13..6324151f4e 100644 --- a/meta/recipes-devtools/python/python3_3.14.2.bb +++ b/meta/recipes-devtools/python/python3_3.14.2.bb @@ -33,6 +33,7 @@ SRC_URI = "http://www.python.org/ftp/python/${PV}/Python-${PV}.tar.xz \ file://0001-test_pyrepl-skip-test_unix_console.test_cursor_back_.patch \ file://0001-test_sysconfig-skip-test_sysconfig.test_sysconfigdat.patch \ file://0001-Skip-flaky-test_default_timeout-tests.patch \ + file://0001-gh-144787-tests-Allow-TLS-v1.2-to-be-minimum-version.patch \ " SRC_URI:append:class-native = " \ file://0001-Lib-sysconfig.py-use-prefix-value-from-build-configu.patch \