Changing ssl verify flag used for testing - the current one was not available in python 3.9

Author: petyaslavova

tests/test_asyncio/test_ssl.py

@@ -65,7 +65,7 @@ async def test_ssl_flags_config_applied_to_context(self, request):
         # Test with specific SSL verify flags
         ssl_verify_flags_config = [
             (ssl.VerifyFlags.VERIFY_X509_STRICT, False),  # Disable strict verification
-            (ssl.VerifyFlags.VERIFY_X509_PARTIAL_CHAIN, True),  # Enable partial chain
+            (ssl.VerifyFlags.VERIFY_CRL_CHECK_CHAIN, True),  # Enable partial chain
         ]
 
         r = redis.Redis(
@@ -125,10 +125,10 @@ def capture_context_create_default():
                     captured_context.options & ssl.VerifyFlags.VERIFY_X509_STRICT
                 ), "VERIFY_X509_STRICT should be disabled but is enabled"
 
-                # Verify that VERIFY_X509_PARTIAL_CHAIN was enabled (bit set)
+                # Verify that VERIFY_CRL_CHECK_CHAIN was enabled (bit set)
                 assert (
-                    captured_context.options & ssl.VerifyFlags.VERIFY_X509_PARTIAL_CHAIN
-                ), "VERIFY_X509_PARTIAL_CHAIN should be enabled but is disabled"
+                    captured_context.options & ssl.VerifyFlags.VERIFY_CRL_CHECK_CHAIN
+                ), "VERIFY_CRL_CHECK_CHAIN should be enabled but is disabled"
 
         finally:
             await r.aclose()

tests/test_connection_pool.py

@@ -539,12 +539,12 @@ def get_connection(self):
                 return self.make_connection()
 
         pool = DummyConnectionPool.from_url(
-            "rediss://?ssl_verify_flags_config=[(VERIFY_X509_STRICT,False), (VERIFY_X509_PARTIAL_CHAIN,True)]"
+            "rediss://?ssl_verify_flags_config=[(VERIFY_X509_STRICT,False), (VERIFY_CRL_CHECK_CHAIN,True)]"
         )
 
         assert pool.get_connection().ssl_verify_flags_config == [
             (ssl.VerifyFlags.VERIFY_X509_STRICT, False),
-            (ssl.VerifyFlags.VERIFY_X509_PARTIAL_CHAIN, True),
+            (ssl.VerifyFlags.VERIFY_CRL_CHECK_CHAIN, True),
         ]
 
     def test_ssl_flags_config_invalid_flag(self):
@@ -554,12 +554,12 @@ def get_connection(self):
 
         with pytest.raises(ValueError):
             DummyConnectionPool.from_url(
-                "rediss://?ssl_verify_flags_config=[(VERIFY_X509,False), (VERIFY_X509_PARTIAL_CHAIN,True)]"
+                "rediss://?ssl_verify_flags_config=[(VERIFY_X509,False), (VERIFY_CRL_CHECK_CHAIN,True)]"
             )
 
         with pytest.raises(ValueError):
             DummyConnectionPool.from_url(
-                "rediss://?ssl_verify_flags_config=[(VERIFY_X509_STRICT,Ok), (VERIFY_X509_PARTIAL_CHAIN,True)]"
+                "rediss://?ssl_verify_flags_config=[(VERIFY_X509_STRICT,Ok), (VERIFY_CRL_CHECK_CHAIN,True)]"
             )
 
 

tests/test_ssl.py

@@ -337,7 +337,7 @@ def test_ssl_verify_flags_config_applied_to_context(self, request):
         # Test with specific SSL verify flags
         ssl_verify_flags_config = [
             (ssl.VerifyFlags.VERIFY_X509_STRICT, False),  # Disable strict verification
-            (ssl.VerifyFlags.VERIFY_X509_PARTIAL_CHAIN, True),  # Enable partial chain
+            (ssl.VerifyFlags.VERIFY_CRL_CHECK_CHAIN, True),  # Enable partial chain
         ]
 
         r = redis.Redis(
@@ -403,10 +403,10 @@ def capture_context_wrap_socket(context_self, sock, **_kwargs):
                     captured_context.options & ssl.VerifyFlags.VERIFY_X509_STRICT
                 ), "VERIFY_X509_STRICT should be disabled but is enabled"
 
-                # Verify that VERIFY_X509_PARTIAL_CHAIN was enabled (bit set)
+                # Verify that VERIFY_CRL_CHECK_CHAIN was enabled (bit set)
                 assert (
-                    captured_context.options & ssl.VerifyFlags.VERIFY_X509_PARTIAL_CHAIN
-                ), "VERIFY_X509_PARTIAL_CHAIN should be enabled but is disabled"
+                    captured_context.options & ssl.VerifyFlags.VERIFY_CRL_CHECK_CHAIN
+                ), "VERIFY_CRL_CHECK_CHAIN should be enabled but is disabled"
 
             finally:
                 mock_sock.close()