From b6ec563454e322348c26d4a16ea1dfe853239ef8 Mon Sep 17 00:00:00 2001 From: Fantix King Date: Fri, 3 May 2019 18:31:40 -0500 Subject: [PATCH] enforce TLS<1.3 for SSL renegotiation tests * fixes #248 --- tests/test_tcp.py | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/tests/test_tcp.py b/tests/test_tcp.py index 050ee45a..76403a65 100644 --- a/tests/test_tcp.py +++ b/tests/test_tcp.py @@ -2203,6 +2203,8 @@ def test_renegotiation(self): sslctx.use_privatekey_file(self.ONLYKEY) sslctx.use_certificate_chain_file(self.ONLYCERT) client_sslctx = self._create_client_ssl_context() + if hasattr(ssl, 'OP_NO_TLSv1_3'): + client_sslctx.options |= ssl.OP_NO_TLSv1_3 def server(sock): conn = openssl_ssl.Connection(sslctx, sock) @@ -2560,6 +2562,8 @@ def test_flush_before_shutdown(self): sslctx_openssl.use_privatekey_file(self.ONLYKEY) sslctx_openssl.use_certificate_chain_file(self.ONLYCERT) client_sslctx = self._create_client_ssl_context() + if hasattr(ssl, 'OP_NO_TLSv1_3'): + client_sslctx.options |= ssl.OP_NO_TLSv1_3 future = None