commit 72ef9610593bfee5f504f9070482a265ac5eac69
author Benjamin Peterson <benjamin@python.org> Wed Mar 04 22:49:41 2015 -0500
committer Benjamin Peterson <benjamin@python.org> Wed Mar 04 22:49:41 2015 -0500
tree 33837c10c7d44aa8a631d435140f73453e89003a
parent b1ebba5bd569ede9b6f9573d6618fb3a6abddae5

expose X509_V_FLAG_TRUSTED_FIRST

Lib/test/test_ssl.py

diff --git a/Lib/test/test_ssl.py b/Lib/test/test_ssl.py
index e9e80ee..b2d57cf 100644
--- a/Lib/test/test_ssl.py
+++ b/Lib/test/test_ssl.py
@@ -749,8 +749,9 @@
                          "verify_flags need OpenSSL > 0.9.8")
     def test_verify_flags(self):
         ctx = ssl.SSLContext(ssl.PROTOCOL_TLSv1)
-        # default value by OpenSSL
-        self.assertEqual(ctx.verify_flags, ssl.VERIFY_DEFAULT)
+        # default value
+        tf = getattr(ssl, "VERIFY_X509_TRUSTED_FIRST", 0)
+        self.assertEqual(ctx.verify_flags, ssl.VERIFY_DEFAULT | tf)
         ctx.verify_flags = ssl.VERIFY_CRL_CHECK_LEAF
         self.assertEqual(ctx.verify_flags, ssl.VERIFY_CRL_CHECK_LEAF)
         ctx.verify_flags = ssl.VERIFY_CRL_CHECK_CHAIN