gh-109945 fix openssl<3 tests

planetf1 · planetf1 · commit 5ed84f5e7b53 · 2024-06-04T10:04:14.000+01:00
Signed-off-by: Nigel Jones &lt;jonesn@uk.ibm.com&gt;
diff --git a/Lib/test/test_ssl.py b/Lib/test/test_ssl.py
@@ -1375,12 +1375,15 @@ def test_set_ecdh_curve(self):
         ctx = ssl.SSLContext(ssl.PROTOCOL_TLS_SERVER)
         ctx.set_ecdh_curve("prime256v1")
         ctx.set_ecdh_curve(b"prime256v1")
-        ctx.set_ecdh_curve("prime256v1:brainpoolP384r1")
-        ctx.set_ecdh_curve(b"prime256v1:brainpoolP384r1")
+        # Only OpenSSL 3 and above supported for multiple curves
+        if (IS_OPENSSL_3_0_0 >= 3):
+            ctx.set_ecdh_curve("prime256v1:brainpoolP384r1")
+            ctx.set_ecdh_curve(b"prime256v1:brainpoolP384r1")
         self.assertRaises(TypeError, ctx.set_ecdh_curve)
         self.assertRaises(TypeError, ctx.set_ecdh_curve, None)
         self.assertRaises(ValueError, ctx.set_ecdh_curve, "foo")
         self.assertRaises(ValueError, ctx.set_ecdh_curve, b"foo")
+        # Multiple bad curves should cause error for any OpenSSL version
         self.assertRaises(ValueError, ctx.set_ecdh_curve, "foo:bar")
         self.assertRaises(ValueError, ctx.set_ecdh_curve, b"foo:bar")
         self.assertRaises(ValueError, ctx.set_ecdh_curve, "prime256v1:bar")
