adjust test_crl_check for trusted first being default

d86699fe · Benjamin Peterson · 72ef9610 · d86699fe
Commit d86699fe authored Mar 04, 2015 by Benjamin Peterson
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 1 deletion

Lib/test/test_ssl.py Lib/test/test_ssl.py +2 -1

No files found.
--- a/Lib/test/test_ssl.py
+++ b/Lib/test/test_ssl.py
@@ -2065,7 +2065,8 @@ else:
            context = ssl.SSLContext(ssl.PROTOCOL_TLSv1)
            context.verify_mode = ssl.CERT_REQUIRED
            context.load_verify_locations(SIGNING_CA)
-            self.assertEqual(context.verify_flags, ssl.VERIFY_DEFAULT)
+            tf = getattr(ssl, "VERIFY_X509_TRUSTED_FIRST", 0)
+            self.assertEqual(context.verify_flags, ssl.VERIFY_DEFAULT | tf)

            # VERIFY_DEFAULT should pass
            server = ThreadedEchoServer(context=server_context, chatty=True)