From: Christian Heimes <christian@cheimes.de>
Date: Fri, 22 Nov 2013 02:43:48 +0000 (+0100)
Subject: or VERIFY_CRL_CHECK_LEAF to verify_flags
X-Git-Tag: v3.4.0b1~131
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=32f0c7a67b6b2eb3808b47b462e837582d6710f8;p=thirdparty%2FPython%2Fcpython.git

or VERIFY_CRL_CHECK_LEAF to verify_flags
---

diff --git a/Lib/test/test_ssl.py b/Lib/test/test_ssl.py
index 2190d9f6bdb8..4ebc4b0fa9cc 100644
--- a/Lib/test/test_ssl.py
+++ b/Lib/test/test_ssl.py
@@ -1816,7 +1816,7 @@ else:
             context = ssl.SSLContext(ssl.PROTOCOL_TLSv1)
             context.verify_mode = ssl.CERT_REQUIRED
             context.load_verify_locations(SIGNING_CA)
-            context.verify_flags = ssl.VERIFY_DEFAULT
+            self.assertEqual(context.verify_flags, ssl.VERIFY_DEFAULT)
 
             # VERIFY_DEFAULT should pass
             server = ThreadedEchoServer(context=server_context, chatty=True)
@@ -1827,7 +1827,7 @@ else:
                     self.assertTrue(cert, "Can't get peer certificate.")
 
             # VERIFY_CRL_CHECK_LEAF without a loaded CRL file fails
-            context.verify_flags = ssl.VERIFY_CRL_CHECK_LEAF
+            context.verify_flags |= ssl.VERIFY_CRL_CHECK_LEAF
 
             server = ThreadedEchoServer(context=server_context, chatty=True)
             with server: