From: Colin McAllister <colinmca242@gmail.com>
Date: Fri, 13 Feb 2026 17:17:53 +0000 (-0600)
Subject: gh-144787: [tests] Allow TLS v1.2 to be minimum version (GH-144790)
X-Git-Tag: v3.15.0a7~290
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=d625f7da33bf8eb57fb7e1a05deae3f68bf4d00f;p=thirdparty%2FPython%2Fcpython.git

gh-144787: [tests] Allow TLS v1.2 to be minimum version (GH-144790)

Allow TLS v1.2 to be minimum version

Updates test_min_max_version to allow TLS v1.2 to be minimum version if
TLS 1.0 and 1.1 are disabled in OpenSSL.
---

diff --git a/Lib/test/test_ssl.py b/Lib/test/test_ssl.py
index 6023c89bca03..7e9ba735b3ce 100644
--- a/Lib/test/test_ssl.py
+++ b/Lib/test/test_ssl.py
@@ -1156,7 +1156,12 @@ class ContextTests(unittest.TestCase):
         ctx.maximum_version = ssl.TLSVersion.MINIMUM_SUPPORTED
         self.assertIn(
             ctx.maximum_version,
-            {ssl.TLSVersion.TLSv1, ssl.TLSVersion.TLSv1_1, ssl.TLSVersion.SSLv3}
+            {
+                ssl.TLSVersion.TLSv1,
+                ssl.TLSVersion.TLSv1_1,
+                ssl.TLSVersion.TLSv1_2,
+                ssl.TLSVersion.SSLv3,
+            }
         )
 
         ctx.minimum_version = ssl.TLSVersion.MAXIMUM_SUPPORTED