From d78d60f33e012ae2e3ee7a04a6bcb494bb72ee6b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Miloslav=20Trma=C4=8D?= Date: Fri, 22 Nov 2013 21:36:17 +0200 Subject: Use correct syntax for testing SSLv2 Original "-no_tls1 -no_ssl3" was meant as a synonym for SSLv2. However, with the progressing deterioration of old SSL versions, this could actually end with something else. So, we ask specifically for SSLv2 when we want it. See https://bugzilla.redhat.com/show_bug.cgi?id=1004437 for more information on the issue. --- tests/test_ssl.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tests/test_ssl.py b/tests/test_ssl.py index d0439d6..b64f011 100644 --- a/tests/test_ssl.py +++ b/tests/test_ssl.py @@ -408,7 +408,7 @@ class MiscSSLClientTestCase(BaseSSLClientTestCase): def test_sslv23_weak_crypto(self): if fips_mode: # TLS is required in FIPS mode return - self.args = self.args + ['-no_tls1', '-no_ssl3'] + self.args = self.args + ['-ssl2'] pid = self.start_server(self.args) try: ctx = SSL.Context('sslv23', weak_crypto=1) -- cgit v1.2.1