(self)
| 1523 | 0 if IS_OPENSSL_3_0_0 else ssl.OP_LEGACY_SERVER_CONNECT) |
| 1524 | |
| 1525 | def test_create_default_context(self): |
| 1526 | ctx = ssl.create_default_context() |
| 1527 | |
| 1528 | self.assertEqual(ctx.protocol, ssl.PROTOCOL_TLS_CLIENT) |
| 1529 | self.assertEqual(ctx.verify_mode, ssl.CERT_REQUIRED) |
| 1530 | self.assertEqual(ctx.verify_flags & ssl.VERIFY_X509_PARTIAL_CHAIN, |
| 1531 | ssl.VERIFY_X509_PARTIAL_CHAIN) |
| 1532 | self.assertEqual(ctx.verify_flags & ssl.VERIFY_X509_STRICT, |
| 1533 | ssl.VERIFY_X509_STRICT) |
| 1534 | self.assertTrue(ctx.check_hostname) |
| 1535 | self._assert_context_options(ctx) |
| 1536 | |
| 1537 | with open(SIGNING_CA) as f: |
| 1538 | cadata = f.read() |
| 1539 | ctx = ssl.create_default_context(cafile=SIGNING_CA, capath=CAPATH, |
| 1540 | cadata=cadata) |
| 1541 | self.assertEqual(ctx.protocol, ssl.PROTOCOL_TLS_CLIENT) |
| 1542 | self.assertEqual(ctx.verify_mode, ssl.CERT_REQUIRED) |
| 1543 | self._assert_context_options(ctx) |
| 1544 | |
| 1545 | ctx = ssl.create_default_context(ssl.Purpose.CLIENT_AUTH) |
| 1546 | self.assertEqual(ctx.protocol, ssl.PROTOCOL_TLS_SERVER) |
| 1547 | self.assertEqual(ctx.verify_mode, ssl.CERT_NONE) |
| 1548 | self._assert_context_options(ctx) |
| 1549 | |
| 1550 | def test__create_stdlib_context(self): |
| 1551 | ctx = ssl._create_stdlib_context() |
nothing calls this directly
no test coverage detected