From: Benjamin Peterson <benjamin@python.org>
Date: Thu, 5 Mar 2015 04:18:48 +0000 (-0500)
Subject: adjust test_crl_check for trusted first being default
X-Git-Tag: v2.7.10rc1~143
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=d86699fe04228f6be216355fbafb765d6c3131e7;p=thirdparty%2FPython%2Fcpython.git

adjust test_crl_check for trusted first being default
---

diff --git a/Lib/test/test_ssl.py b/Lib/test/test_ssl.py
index b2d57cf87478..97e5654a9fb2 100644
--- a/Lib/test/test_ssl.py
+++ b/Lib/test/test_ssl.py
@@ -2065,7 +2065,8 @@ else:
             context = ssl.SSLContext(ssl.PROTOCOL_TLSv1)
             context.verify_mode = ssl.CERT_REQUIRED
             context.load_verify_locations(SIGNING_CA)
-            self.assertEqual(context.verify_flags, ssl.VERIFY_DEFAULT)
+            tf = getattr(ssl, "VERIFY_X509_TRUSTED_FIRST", 0)
+            self.assertEqual(context.verify_flags, ssl.VERIFY_DEFAULT | tf)
 
             # VERIFY_DEFAULT should pass
             server = ThreadedEchoServer(context=server_context, chatty=True)