From: Miss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Date: Fri, 13 Feb 2026 20:28:06 +0000 (+0100)
Subject: [3.14] gh-144787: [tests] Allow TLS v1.2 to be minimum version (GH-144790) (#144791)
X-Git-Tag: v3.14.4~287
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=f24009feeb78f605a3ee177d9e7cfb63d5890ee1;p=thirdparty%2FPython%2Fcpython.git

[3.14] gh-144787: [tests] Allow TLS v1.2 to be minimum version (GH-144790) (#144791)

gh-144787: [tests] Allow TLS v1.2 to be minimum version (GH-144790)

Allow TLS v1.2 to be minimum version

Updates test_min_max_version to allow TLS v1.2 to be minimum version if
TLS 1.0 and 1.1 are disabled in OpenSSL.
(cherry picked from commit d625f7da33bf8eb57fb7e1a05deae3f68bf4d00f)

Co-authored-by: Colin McAllister <colinmca242@gmail.com>
---

diff --git a/Lib/test/test_ssl.py b/Lib/test/test_ssl.py
index 67a63907293e..f26df7819cdb 100644
--- a/Lib/test/test_ssl.py
+++ b/Lib/test/test_ssl.py
@@ -1085,7 +1085,12 @@ class ContextTests(unittest.TestCase):
         ctx.maximum_version = ssl.TLSVersion.MINIMUM_SUPPORTED
         self.assertIn(
             ctx.maximum_version,
-            {ssl.TLSVersion.TLSv1, ssl.TLSVersion.TLSv1_1, ssl.TLSVersion.SSLv3}
+            {
+                ssl.TLSVersion.TLSv1,
+                ssl.TLSVersion.TLSv1_1,
+                ssl.TLSVersion.TLSv1_2,
+                ssl.TLSVersion.SSLv3,
+            }
         )
 
         ctx.minimum_version = ssl.TLSVersion.MAXIMUM_SUPPORTED