or VERIFY_CRL_CHECK_LEAF to verify_flags

diff --git a/Lib/test/test_ssl.py b/Lib/test/test_ssl.py
index 2190d9f6bdb8dd3ac1d63b68db699bfdf1a0ab83..4ebc4b0fa9cc2162b5b3763e5be23890a6c62ce9 100644 (file)
--- a/Lib/test/test_ssl.py
+++ b/Lib/test/test_ssl.py
@@ -1816,7 +1816,7 @@ else:
             context = ssl.SSLContext(ssl.PROTOCOL_TLSv1)
             context.verify_mode = ssl.CERT_REQUIRED
             context.load_verify_locations(SIGNING_CA)
-            context.verify_flags = ssl.VERIFY_DEFAULT
+            self.assertEqual(context.verify_flags, ssl.VERIFY_DEFAULT)
 
             # VERIFY_DEFAULT should pass
             server = ThreadedEchoServer(context=server_context, chatty=True)
@@ -1827,7 +1827,7 @@ else:
                     self.assertTrue(cert, "Can't get peer certificate.")
 
             # VERIFY_CRL_CHECK_LEAF without a loaded CRL file fails
-            context.verify_flags = ssl.VERIFY_CRL_CHECK_LEAF
+            context.verify_flags |= ssl.VERIFY_CRL_CHECK_LEAF
 
             server = ThreadedEchoServer(context=server_context, chatty=True)
             with server: