]> git.ipfire.org Git - thirdparty/Python/cpython.git/commitdiff
[3.14] gh-144787: [tests] Allow TLS v1.2 to be minimum version (GH-144790) (#144791)
authorMiss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Fri, 13 Feb 2026 20:28:06 +0000 (21:28 +0100)
committerGitHub <noreply@github.com>
Fri, 13 Feb 2026 20:28:06 +0000 (12:28 -0800)
gh-144787: [tests] Allow TLS v1.2 to be minimum version (GH-144790)

Allow TLS v1.2 to be minimum version

Updates test_min_max_version to allow TLS v1.2 to be minimum version if
TLS 1.0 and 1.1 are disabled in OpenSSL.
(cherry picked from commit d625f7da33bf8eb57fb7e1a05deae3f68bf4d00f)

Co-authored-by: Colin McAllister <colinmca242@gmail.com>
Lib/test/test_ssl.py

index 67a63907293e8ea7c51e7e9a2e764a85e31ae83c..f26df7819cdbd8f4394fceea394ee4caae3382cf 100644 (file)
@@ -1085,7 +1085,12 @@ class ContextTests(unittest.TestCase):
         ctx.maximum_version = ssl.TLSVersion.MINIMUM_SUPPORTED
         self.assertIn(
             ctx.maximum_version,
-            {ssl.TLSVersion.TLSv1, ssl.TLSVersion.TLSv1_1, ssl.TLSVersion.SSLv3}
+            {
+                ssl.TLSVersion.TLSv1,
+                ssl.TLSVersion.TLSv1_1,
+                ssl.TLSVersion.TLSv1_2,
+                ssl.TLSVersion.SSLv3,
+            }
         )
 
         ctx.minimum_version = ssl.TLSVersion.MAXIMUM_SUPPORTED