openssl error codes are clearly not considered part of the api contract
diff --git a/src/cryptography/hazmat/backends/openssl/backend.py b/src/cryptography/hazmat/backends/openssl/backend.py
index 7625240..db4f963 100644
--- a/src/cryptography/hazmat/backends/openssl/backend.py
+++ b/src/cryptography/hazmat/backends/openssl/backend.py
@@ -1057,11 +1057,8 @@
)
if res == 0:
errors = self._consume_errors()
- assert errors[0][1:] == (
- self._lib.ERR_LIB_RSA,
- self._lib.RSA_F_RSA_SIGN,
- self._lib.RSA_R_DIGEST_TOO_BIG_FOR_RSA_KEY
- )
+ assert errors[0][1] == self._lib.ERR_LIB_RSA
+ assert errors[0][3] == self._lib.RSA_R_DIGEST_TOO_BIG_FOR_RSA_KEY
raise ValueError("Digest too big for RSA key")
return _CertificateSigningRequest(self, x509_req)