From: Benjamin Peterson <benjamin@python.org>
Date: Thu, 5 Mar 2015 04:18:48 +0000 (-0500)
Subject: adjust test_crl_check for trusted first being default
X-Git-Tag: v3.5.0a2~26^2~1
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=c3d9c5ca0a74f0eedc228640977d6be1c2ddc176;p=thirdparty%2FPython%2Fcpython.git

adjust test_crl_check for trusted first being default
---

diff --git a/Lib/test/test_ssl.py b/Lib/test/test_ssl.py
index 6353e230d605..779b622d840e 100644
--- a/Lib/test/test_ssl.py
+++ b/Lib/test/test_ssl.py
@@ -2007,7 +2007,8 @@ else:
             context = ssl.SSLContext(ssl.PROTOCOL_TLSv1)
             context.verify_mode = ssl.CERT_REQUIRED
             context.load_verify_locations(SIGNING_CA)
-            self.assertEqual(context.verify_flags, ssl.VERIFY_DEFAULT)
+            tf = getattr(ssl, "VERIFY_X509_TRUSTED_FIRST", 0)
+            self.assertEqual(context.verify_flags, ssl.VERIFY_DEFAULT | tf)
 
             # VERIFY_DEFAULT should pass
             server = ThreadedEchoServer(context=server_context, chatty=True)