enforce TLS<1.3 for SSL renegotiation tests

* fixes #248
MagicStack · May 7, 2019 · cbbac15 · cbbac15
1 parent 6e24e88
commit cbbac15
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/tests/test_tcp.py b/tests/test_tcp.py
@@ -2203,6 +2203,8 @@ def test_renegotiation(self):
         sslctx.use_privatekey_file(self.ONLYKEY)
         sslctx.use_certificate_chain_file(self.ONLYCERT)
         client_sslctx = self._create_client_ssl_context()
+        if hasattr(ssl, 'OP_NO_TLSv1_3'):
+            client_sslctx.options |= ssl.OP_NO_TLSv1_3
 
         def server(sock):
             conn = openssl_ssl.Connection(sslctx, sock)
@@ -2560,6 +2562,8 @@ def test_flush_before_shutdown(self):
         sslctx_openssl.use_privatekey_file(self.ONLYKEY)
         sslctx_openssl.use_certificate_chain_file(self.ONLYCERT)
         client_sslctx = self._create_client_ssl_context()
+        if hasattr(ssl, 'OP_NO_TLSv1_3'):
+            client_sslctx.options |= ssl.OP_NO_TLSv1_3
 
         future = None