From: Will Childs-Klein <willck93@gmail.com>
Date: Tue, 1 Apr 2025 07:58:47 +0000 (-0400)
Subject: gh-131736: only apply `security_level` workaround in `test_ssl` for security levels... 
X-Git-Tag: v3.14.0a7~112
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=refs%2Fpull%2F131559%2Fhead;p=thirdparty%2FPython%2Fcpython.git

gh-131736: only apply `security_level` workaround in `test_ssl` for security levels greater than 1 (#131739)
---

diff --git a/Lib/test/test_ssl.py b/Lib/test/test_ssl.py
index b73028b1a938..1aff8e22683a 100644
--- a/Lib/test/test_ssl.py
+++ b/Lib/test/test_ssl.py
@@ -155,7 +155,8 @@ if is_ubuntu():
         for ctx in ctxs:
             if (
                 hasattr(ctx, "minimum_version") and
-                ctx.minimum_version <= ssl.TLSVersion.TLSv1_1
+                ctx.minimum_version <= ssl.TLSVersion.TLSv1_1 and
+                ctx.security_level > 1
             ):
                 ctx.set_ciphers("@SECLEVEL=1:ALL")
 else: